Clari5

Banking on RPA to Combat Financial Fraud

The volley of financial services offered to and engaged by a common man today demands sophisticated systems to collect and connect their data. Regulatory compliance and customer due diligence carve out the biggest chunk of a financial firm’s time and resources: on an average, $60 million[1] per firm per year. Robotic process automation in banking has the potential to overhaul these processes and replace them with time- and cost-effective workflows. It streamlines the communication between disparate bank systems to create a holistic financial footprint of the customer while reducing effort and expenditure.

Although RPA has existed inconspicuously in many banking processes, it enters its renaissance with the help of Machine Learning (ML), Natural Language Processing (NLP) and Artificial Neural Networks (ANN). Together, these technologies constitute the broad domain of Artificial Intelligence (AI). They drive human-like operations without much intervention from employees in the repetitive tasks. The re-invented RPA is likely to become the core of most bank fraud-detection and customer experience processes in the present market.

Clari5, the ML-driven cross-channel enterprise financial risk management suite, leverages RPA-integration to automate risk assessment and fraud investigation solutions end-to-end. It can pull data from multiple channels (Credit, debit, loan, mortgage etc.) in real-time and trigger instant alerts to manage cases with minimal human oversight.

In a preemptive effort to fight financial crime, larger banks are opting to use such automatedmulti-jurisdictional platforms to pull customer information from all service lines, rather than creating yet another silo for technology. And RPA is the enabler behind this evolved strategy.

The Concept: Fin-bots and their ‘Brains’

Contrary to popular belief, RPA doesn’t mean assigning the corner office to RoboCop and saving on his (or its?) employee benefits. The ‘Robot’ in robotic process automation refers to a software bot that automates certain tasks that are too monotonous and mundane for the human mind. It’s equipped with a conceptual ‘brain’ that ‘learns’ the procedure programmed into it. It’s akin to reading a book and following the instructions to the letter except the bots can do it faster, cheaper and without human error.

With the advent of Artificial Intelligence aided by machine learning, these bots are further granted with cognitive capabilities that enable judgment-based actions.ML facilitates automatic learning and improvement in such intelligent systems. Bots learn by analyzing known or unlabeled datasets. They use their inbuilt learning algorithm to create models and make predictions about the output values of the datasets.In banking, this gives the bots greater autonomy and reduces the need for human supervision through the course of recognizing alerts, collecting customer data, credit scoring, and subsequent fulfilment activities.  While they would still require some human touchpoints in the process, they can resolve issues with modelized data just like a human would.

NLP takes the capabilities of these bots to the next level by coaching them to decode unstructured datasets like free-form text. The combination of NLP and ML helps RPA-integrated bank fraud detection systems to capture customer data from multiple avenues, evaluate it, convert it to an actionable form and dispose it to concerned teams. Artificial Neural Networks simulate the human brain and are an advanced tool to upskill the fin-bots.

Integrating RPA into banking involves ‘training’ these software bots to perform tediousevidence-gathering tasks involved in tracking and flagging fraudulent activities. The resultant processes can be semi-automated or fully automated. To determine the extent of integration required, the manual proceduresinvolved must be analyzed. This helps firms recognize the high-volume, low-value actions. These actions can be coded into ‘if-then’ scenarios with minimal deviations and complemented by error-handling capabilities. In short, a software bot takes them over.

Pitting RPA against Bank Fraud

While there are plenty of uses cases, robotic process automation makes the most sense in a field like enterprise financial crime management. Firms now proactively monitor suspicious activity and enforce strict regulations to prevent financial fraud which might harm their customers and their reputation. As almost 80-90% of the new services are availed by existing customers, it’s that much more important to map their past and current transaction patterns to predict future threats. And if there’s a way to speed up and ease the process, it’s worth exploring. Enter RPA.

Both bank fraud risk assessment and anti-money laundering operations demand data collection from multiple legacy systems.RPA engages the conditional if-then algorithm to collect the information from all silos and highlight the anomalies in a complete financial profile.

In the semi-automated scenario, the bot can beassigned with a list of actions that are triggered when the risk analyst or fraud investigator runs the program. This would automatically take screenshots of the relevant accounts/details and collate them for manual scrutiny. Or the task can be fully automated such that once triggered, it runs in the background for multiple instances and performs consequential actions like sending message alerts to the customer or disseminating information to relevant departments within the firm. This frees the employee to tackle high-value tasks and boosts their overall productivity.

The Pros

We looked into RPA as a positive addition to financial crime management services because of its multi-pronged benefits. It’s viable as a complete solution, from setup to end-customer usage. First off, integrating RPA into banking does NOT require additional core infrastructure or many upgrades. The cost of implementation is limited as opposed to upgrading a legacy system, which is both expensive and risk-ridden.

The main operational advantages are of time and cost savings. RPA-integrated suites are usually designed to be user-friendly to employees with little or no coding experience. These fin-bots shoulder the burden of repetitive tasks and drive the employee morale up. They enable the firms to hire only specialized FTEs while the bots function round the clock, 365 days and continue monitoring at all times. With automatic time stamping and meta-data, it’s easy to track the data provenance and sequence of their activity.

As with any software, the code of RPA systems is easy to update and align with the evolving regulations. This ensures that yourrisk detection strategies remain current.The scalability of RPA also plays well with the unified data mapping approach.

RPA Use Cases in Bank Fraud Detection

Bank of Ceylon became the latest Clari5 partner to recognize the impact of the silo-breaking technology. Robotic Process Automation is a veritable catalyst in this type of undertaking. It has both individual/firm-level impact and country-wide implications in terms of fighting financial terrorism. Two use cases of Clari5 that stand out are:

Use Case1: Intelligent Alert Disposition

Suites that operate using Intelligent Process Automation (RPA + ML) authorize their bots to access their case management systems. The entire process from login up to resolution can be delegated to these bots. They may access the configured alerts from a queue. Based on the information, they can retrieve client ID and PAN details. This would further trigger requests to get the credit scores from external portals. Based on this score the bot might make an unsupervised closure or forward the alert to the trading team.

Given the number of transactions and the wide array of parameters that affect customer activity, this will reduce the huge workload in terms of addressing inconsequential alerts. But it also ensures that the real fraudulenttransactions are instantly spotted from a diverse dataset.

Use Case2: Enhanced Due Diligence for Trade Monitoring

With nations taking the initiative for a risk-based approach to battle financial terrorism and money laundering, RPA-integrated, cross-channel software emerges as the go-to solution. RPA bots can screen and spot high-value transactions to beneficiaries in risk countries.  The transaction itself can be evaluated for potential fraud by comparing Bill of Lading to the Letter of Credit. The bots can handle these critical situations with greater accuracy and no vested interests. In fact, with the extent of insight achieved through RPA, you can check the trades made against the suppliers’ actual line of business. Given their ability to digest disorganized information from various sources, they can handle exception cases better than human employees.

The Challenges

There aren’t any notable challenges in consolidating robotic process automation into financial fraud risk management. However, the extent of its utilization depends on its successful implementation. The setup requires extensive process knowledge, technical acumen, and regular monitoring to ensure that the system delivers.

RPA is a promising participant in the surging digital transformation of financial firms. As connectivity aids more fraudulent activities, RPA-integration can ensure that the enterprises always remain two steps ahead of such attempts.The reduced process times and higher efficiency gains are extra perks. Considering the bigger picture, the virtual workforce can give banks an unbeatable competitive advantage in the market.

References:

[1]Thomson Reuters, 2016 Know Your Customer Survey

[2]https://ibsintelligence.com/ibs-journal/bank-of-ceylon-chooses-customerxps-clari5-real-time-anti-money-laundering-solution/

 

February 2019 Issue

See how Clari5 is helping a leading bank fight fraud and money laundering while using the same real-time, cross channel intelligence for cross-sell/upsell as well.
One in every 2500 calls to an IVR is fraudulent. With advancements in AI and ML, IVR systems can be made to deliver a richer and more secure customer-centric experience.
AI is changing the fundamental building blocks of the modern economy. Read our perspective on the epochal systemic shift from intelligence to wisdom.
When your customers are sitting down across the desk, that’s the time to build relationships. You’ll never have them so close so willingly, so make the most of the opportunity.

Distinguished Private Bank Leverages Clari5 Unified Real-Time Solution for Growing Revenue while Fighting Financial Crime

Read how a distinguished private bank leverages the power of Clari5’s Unified Real-time Solution for Growing Revenue while Fighting Financial Crime. Using the same transaction data that runs negative scenarios on the Fraud and AML engine, the same computing space is also being used to run positive scenarios for cross-sell and upsell.

Insulating IVR Systems from Fraud

Interactive Voice Response systems have been around for a while now. From banking, surveys, office call routing, order transactions for food to air tickets to hotel bookings and more, IVR has evolved to now become ubiquitous. But does its omnipresence mean that IVRS is completely insulated from fraud despite advanced technologies powering them?

Also, Aite reveals that one out of every 2,500 calls to a call center is fraudulent. Asking for an address change, new PIN or other requests including maybe a new credit card are some of the tactics by fraudsters. And how do they do it? By contacting a bank and engaging with an IVRS.

With customer patience shrinking by the day and fraud becoming more sophisticated, solution providers are now combining AI and NLP, to significantly shift the needle on customer support efficiency and reduce resolution time. With advancements in AI and ML, IVR systems can be made to deliver a richer, more secure customer-centric experience.

Intelligent IVRs enable insightful interactions

AI/ML-based IVR systems can –

  • guide customers to the right destination, much faster and more accurately.
  • enable personalization, even propose agent responses and prompt potential cross-sell opportunities.
  • increase speed of resolution, operational efficiencies and shrink agent call time.
  • capture and analyze data.

AI with Machine Learning capability enables the IVR system to ‘learn’ patterns in large volumes of continuously streaming data. The ‘learning’ is strengthened over time and several transactions that enhance the accuracy of pin-pointing fraudulent transactions, while significantly reducing false positives.

Interestingly, there’s also an assumption that AI will automatically guarantee the security of systems (because it is intelligent after all).

Plugging vulnerabilities
It is a common practice now for customers to be asked to validate their PIN on the IVR, or the CVV code of their existing credit card, or have customers repeat the code sent via email or text using 2FA (two-factor authentication).

Advanced authentication technologies can validate the phone number and physical location of caller and biometrics can help detect altered voices or even compare a caller’s voice to other voices from an existing database of caller voices.

But fraudsters continuously study new IVR tech to outsmart them. They test and mine for account numbers, reset PIN numbers, request new cards, and phish for customer information.

Stats reveal that 33% of live agent fraud calls could have been detected at the IVR stage and for 79% of calls that would never have left the IVR to reach an agent and 70% were fraudulent calls.

Cross-channel fraud prevention ties in initial activity for a person logged in online, mobile app, or IVR. An already authenticated customer moves seamlessly and both the customer and the agent know everything is alright.

A suspect customer from failed logins displays on the call source (e.g., spoofed number), or incidents of repeated attempts to access the IVR can trigger workflows customized to the risk level.

Intelligent routing sends the suspect ones to specially trained agents who then (with help from technology) help navigate them through the proper steps. These scenarios use network information, account access history, length of IVR sessions, and more to make the process smarter.

Also, analytics help strengthen databases of risk factors, and biometrics can be further boosted by passive enrollment from customer conversations. Alerting and notification tied to analysis of activity can inform customers or risk teams.

Some examples of how real-time, cross-channel intelligence can help detect IVR fraud:

  • The call is red flagged when a customer has multiple verification failures using one phone.
  • Alert notification to fraud management team when a customer attempts authenticating call using different phones but failing to authenticate.
  • Multiple attempts to generate a Telephone PIN unsuccessfully using different CLI/phones.
  • Attempting to change ATM PIN immediately after the balance inquiry alerts the fraud management team.
  • Call received from blacklisted phone number sends an automatic alert notification to fraud investigators.

These, along with some additional precautions, can help further strengthen IVR system security:

  • Validate phone numbers against customer data.
  • Check if caller’s physical location at the time of call matches any of the ‘frequent places’ associated with the caller.
  • Analyze behavioral biometrics and set up alerts in case of fraudulent login using stolen credentials.
  • Use security software that can scan all application code for vulnerabilities and identify any possible exposures or threats.
  • Encrypt all data and ensure role-based access to sensitive data.
  • Change IVRS passwords when an employee leaves the organization.

IVR fraud rates have become almost equal to live agent phone fraud, with crime syndicates targeting call center IVRs and agents using both social engineering and sheer force to validate, augment, and monetize breach data.

AI/ML-based cross-channel, real-time solutions help shield contact centers, in both live agent calls and IVR activity, to reduce fraud and operational costs while improving customer experience. These solutions can study and learn from transaction elements to quickly build new rules for flagging anything suspicious.

Analyzing multilayer caller information and risk scoring reputation, caller behavior, network signal, and call statistics further enhance anti-fraud measures. It makes sense to have added layers of protection, for both banks and customers, before fraudsters can access customer data and wreak havoc.

References:

 

January 2019 Issue

CustomerXPs has been featured as one of the innovators in Anti-Money Laundering processing in EY’s Fintech Compendium – a primer on fintech use cases for banking.
A quick roundup of trending topics over the year featuring AI, ML, regtech, blockchain, PSD2, GDPR, contextualization, security and AML compliance.
“Trust is central to banks and CustomerXPs helps them leverage it.” Rivi Varghese, CEO, CustomerXPs in a candid conversation with Analytics India Magazine.
Read how smarter use of AI & ML can help banks address the issue of high false positives – one of the biggest challenges faced by banks globally.

December 2018 Issue

CustomerXPs has been featured in the Fintech Global RegTech 100 – a list of 100 of the world’s most innovative RegTech companies that financial institutions need to know about as they develop their RegTech strategies.
CustomerXPs has again been featured in premier risk technology research and insight analyst Chartis Research’s RiskTech100 listing of top global risk technology vendors for the 5th year.
Clari5 was a platinum sponsor of Sri Lanka’s first compliance symposium where we spoke about how for Sri Lankan banks can enable financial crime management.
With a number of banks have already deployed at least some form of AI, it is only a matter of time before the rest join the gradual but global shift towards AI. See how AI is transforming banking operations today and the newer areas AI will eventually cover.

CustomerXPs featured in Fintech Global RegTech 100

CustomerXPs has been featured in the Fintech Global RegTech 100 – a list of 100 of the world’s most innovative RegTech companies that financial institutions need to know about as they develop their RegTech strategies. The selection criteria included key factors such as impact on the problem being solved; growth in terms of capital raised, revenue, customer traction; innovation of technology solution offered; potential cost savings, efficiency improvement and revenue enhancements generated for clients; and how important is it for a financial institution to know about the company. Read More